Got a notice from IDScan.net? Here’s what to do.
IDScan.net recently reported a data breach in Oregon that may have exposed your personal identification information. This incident could include details like your Full Name, Date of Birth, and images of your government ID. It's important to understand the risks and how to protect yourself right away.
Your checklist
- 1
Keep the letter
Save the notice from IDScan.net and its envelope. The date you were told can matter for legal deadlines.
- 2
Turn on account alerts
Set up text or email alerts with your bank and card issuers so you see any charge the moment it happens.
- 3
Change reused passwords
Change any password you used with this company or reused elsewhere, and turn on two-factor sign-in.
- 4
Get a free claim review
Our legal team checks whether you can be paid for this breach. No fee unless you recover.
Step 4: free claim review
Tell us you got the IDScan.net notice. An attorney, not a call center, reads it and tells you plainly whether you have a claim.
- Free, no obligation
- No fee unless you recover
- Reply within 24 hours
About the IDScan.net breach
- Reported to
- Oregon Attorney General
- Date filed
- September 18, 2026
- People notified
- Not stated
- Cause in filing
- Not stated
Information listed in the filing: Full Name, Date of Birth, Mailing Address, Government ID Number, Driver's License Number, Scanned Identification Document Images, Biometric Metadata, Email Address, Phone Number.
You're holding a breach notice from IDScan.net, informing you about a security incident that occurred around April 1, 2026. The company officially reported this breach in Oregon on September 18, 2026. This means some of your personal information handled by IDScan.net may have fallen into the wrong hands.
The compromised data includes your Full Name, Date of Birth, Mailing Address, Government ID Number, Driver's License Number, Scanned Identification Document Images, Biometric Metadata, Email Address, and Phone Number. This is a lot of very sensitive information that bad actors could try to use.
With these types of details, criminals can attempt serious identity theft. They might try to open accounts in your name, create fake identities, or use your information in other fraudulent ways. Because government IDs and biometric data are involved, this exposure carries long-term risks.
Your first step should be to monitor all your accounts for suspicious activity. Look for any unfamiliar charges, new accounts opened in your name, or unexpected communications. Consider placing a fraud alert or credit freeze with the major credit bureaus to help prevent new accounts from being opened.
Also, be extra careful about emails, calls, or texts asking for personal information. Scammers often use data from breaches to make their fake messages seem more real. Always verify who you're talking to before sharing any details.
Companies like IDScan.net have a duty to keep your information safe. When a breach happens, it suggests that these protections might not have been strong enough. If your data was exposed, you have a right to understand your options.
We are currently investigating this IDScan.net data breach and can help you understand what this means for you. You can speak with our team for a free case review, with no obligation.
IDScan.net data breach questions
- How many people were affected by the IDScan.net data breach, and what was exposed?
- The filing does not give a count of affected people and lists the following information as involved: Full Name, Date of Birth, Mailing Address, Government ID Number, Driver's License Number, Scanned Identification Document Images, Biometric Metadata, Email Address, Phone Number. Your own letter is the best guide to what was exposed about you, since notices are usually tailored to each person.
- Is the IDScan.net data breach letter legit or a scam?
- A notice from IDScan.net in the mail matches the breach IDScan.net reported to the Oregon Attorney General on September 18, 2026. Check that the company name and dates in your letter match that filing. A real notice of data security incident won't ask for your password, Social Security number or a payment — if it does, contact IDScan.net through a phone number or website you find yourself.
- Did IDScan.net offer free credit monitoring?
- Any free monitoring IDScan.net is offering will be described in the notice you received, along with an activation code and a sign-up deadline. Signing up doesn't waive any legal rights you may have.
- Is there a IDScan.net data breach class action lawsuit?
- Law firms often open an investigation after a breach notice like this one, and a class action lawsuit may follow. This page doesn't confirm that a lawsuit has been filed against IDScan.net. You usually don't have to join a class action to be included — if a settlement is reached, class members are notified and can file a claim.
- What should I do after getting the IDScan.net data breach notice?
- Keep the letter and the envelope, and note the date it arrived. Freeze your credit with Equifax, Experian and TransUnion, change any passwords the notice mentions, and sign up for any free credit monitoring the letter offers. Then check whether you may have a claim.
- Where can I see the official IDScan.net breach notice?
- IDScan.net's report is published by the Oregon Attorney General: https://justice.oregon.gov/consumer/databreach/#IDScan.net-2026-09-18 Compare it with the letter you received to confirm the dates and details match.
- Do I need a IDScan.net data breach lawyer or attorney?
- An attorney can read your notice and tell you whether a claim makes sense. A case review here is free, and data breach cases are usually handled on contingency, so there is no upfront cost.
- Can I sue IDScan.net over the data breach?
- It depends on what was exposed, the law in Oregon and your own state, and whether you've been harmed. Most people take part through a class action rather than suing alone. Keep your notification letter — it's the proof that connects you to the breach.
- How much could a IDScan.net data breach settlement or claim be worth?
- There is no set amount, and no IDScan.net settlement is confirmed here. In past data breach settlements, payments depended on what data was exposed and on documented losses — fraud, out-of-pocket costs and time spent dealing with the breach. The filing lists Full Name, Date of Birth, Mailing Address as involved. Keep receipts and records; they're what damages claims are built on.
Other notices sent in Oregon
- Photon HealthOregon Attorney General · Filed October 21, 2026Count not stated
- Aldrich Services LLPOregon Attorney General · Filed October 21, 2026Count not stated
- Roseburg Therapy dba Stronger OregonOregon Attorney General · Filed October 19, 2026Count not stated
- The City of Mt. AngelOregon Attorney General · Filed October 13, 2026Count not stated
- Mercadien P.C., CPAsOregon Attorney General · Filed October 12, 2026Count not stated
- Blueberry PediatricsOregon Attorney General · Filed October 10, 2026Count not stated
Attorney advertising. This page reflects a public regulator filing; it does not mean a lawsuit has been filed or that the company did anything unlawful. Submitting a review request does not create an attorney-client relationship.